IMO permanently blocking anonymous access to Gerrit is far from ideal, it hurts 
the level of transparency of the project.

But this is a common problem for public Git forges, and many have seemed to 
mitigate the most of it by deploying a Proof of Work proxy like Anubis.

Perhaps this can be tried here too?

Best,
Igor

On Thu, Oct 29, 2026, at 08:40, Jukka Jokiniva via Development wrote:
> Dear Qt Developer Community,
> 
> Over the past several days, codereview.qt-project.org has been heavily 
> targeted by crawler bots, causing periods of degraded performance and, at 
> times, making the service unusable.
> 
> We have explored various mitigation measures, including blocking 
> load-intensive endpoints, IP-based blocking, and other countermeasures. 
> Unfortunately, these approaches have proven insufficient or too cumbersome to 
> effectively address the problem.
> 
> As a last resort, I have decided to disable anonymous access to the site.
> 
> I apologize for any inconvenience this may cause. However, given the impact 
> on the availability and usability of the service, this was the only effective 
> solution available to us at this time.
> 
> I would like to start a discussion on whether this should become a permanent 
> change.
> 
> Regards,
> 
> Jukka Jokiniva, Gerrit Administrator
> 
> 
> Confidential
> 
> -- 
> Development mailing list
> [email protected]
> https://lists.qt-project.org/listinfo/development
> 
-- 
Development mailing list
[email protected]
https://lists.qt-project.org/listinfo/development

Reply via email to